The notification that Declude sends out to me does not contain X-IMAIL-SPAM-VALFROM (which makes sense, since it's just a notification, not the original email). I just want the notifications to go away, which should happen if the VALFROM command is processed first, but this doesn't seem to be the case.

Thanks


Christian Lawson wrote:

Declude runs after the VALFROM check is processed, but Declude may be setup to 
not deliver the message to you.  Check the headers of
the message (if you can).  If you see an X-IMAIL-SPAM-VALFROM header, then the 
'verify mail from address' check is working.

Have a good one,
Christian
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers
Sent: Thursday, June 23, 2005 3:21 PM
To: [email protected]
Subject: Re: [IMail Forum] Block messages that claim to come from my domain

We use Declude (AV and JM). We don't whitelist our domain or the IP. But maybe it has to do with the processing order. We get a bunch of notifications (from Declude AV) about these attempts to send viruses, so perhaps Declude is running before the Verify MAIL FROM command, and sending out the notifications. We are not actually receiving the messages. I should've mentioned that.



Christian Lawson wrote:

Are you whitelisting the connecting IP or did you whitelist your domain?

Have a good one,
Christian
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers
Sent: Thursday, June 23, 2005 2:25 PM
To: [email protected]
Subject: Re: [IMail Forum] Block messages that claim to come from my domain

I checked the Verify MAIL FROM address and I still get messages sent from invalid accounts on my domain. I do not have a nobody alias. I
restarted the QM and SMTP services after the change....any ideas?

Kevin


Christian Lawson wrote:



Two Antispam settings: SPF or enable the 'Verify MAIL FROM address' check.

Have a good one,
Christian
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Smith
Sent: Monday, June 20, 2005 9:55 AM
To: Imail Forum
Subject: [IMail Forum] Block messages that claim to come from my domain

Is there a way to block all messages that are "from" my domain but are not valid accounts or aliases setup in my domain? We've been getting a lot of infected zip files lately that are claiming to come from email addresses that don't exist in our domain. I realize that I can just explicitly block those that I've identified, but I want to know if there's a way to block future ones as well without explicitly knowing what they are.

Thanks,

Scott Smith
Network Administrator
248.489.1999
[EMAIL PROTECTED]

Westside & Detroit Reprographics
An ARC Company
-------------------------------------------------


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
---
[This E-mail was scanned for viruses.]





---
[This E-mail was scanned for viruses.]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
---
[This E-mail was scanned for viruses.]





---
[This E-mail was scanned for viruses.]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
---
[This E-mail was scanned for viruses.]



---
[This E-mail was scanned for viruses.]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to